Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
https://securityonion.net
3.22k stars 498 forks source link

Fix Suricata stats.log #31

Closed TOoSmOotH closed 4 years ago

TOoSmOotH commented 5 years ago

Stas.log currently uses history to determine the packet loss. This log file grows to considerable sizes. Look at append: no option and modify the monitoring to take this into account to still generate accurate drop stats.

dougburks commented 4 years ago

Also see: https://www.reddit.com/r/securityonion/comments/iaor6m/20_lots_of_defunct_surilosssh/

TOoSmOotH commented 4 years ago

Fixed in RC2